v0.1.3

OpenTelemetry Security Event Exporter v0.1.3

🎉 Patch Release

This patch release removes specific fields from the JSON payload to streamline the security event format.

✨ Changes

JSON Payload Simplification

• Removed Fields: The following fields are no longer included in the security event JSON payload:
  • severity - Log severity text
  • severity_number - Log severity number
  • message - Log body/message content
  • source - Source field from default attributes

What's Still Included

The security event payload now includes:

• timestamp - Event timestamp in RFC3339 format
• Resource attributes - All resource-level attributes
• Log record attributes - All log-level attributes
• trace_id - Trace ID (if available)
• span_id - Span ID (if available)
• Other default attributes (except source)

🔧 Example Output

Before (v0.1.2)

{
  "timestamp": "2025-12-19T10:30:00Z",
  "severity": "INFO",
  "severity_number": 9,
  "message": "Security event occurred",
  "source": "opentelemetry-collector",
  "compliance.control": "check-sysctls",
  "k8s.cluster.name": "obs-security-event"
}

After (v0.1.3)

{
  "timestamp": "2025-12-19T10:30:00Z",
  "compliance.control": "check-sysctls",
  "k8s.cluster.name": "obs-security-event"
}

📋 Breaking Changes

⚠️ Breaking Change: The following fields have been removed from the JSON payload:

• severity
• severity_number
• message
• source

If you have downstream systems that depend on these fields, you will need to update them or handle the missing fields appropriately.

✅ Testing

All existing tests pass:

• ✅ Configuration validation tests
• ✅ Exporter functionality tests
• ✅ Log processing tests
• ✅ HTTP client tests

📦 Installation

As a Go Module Dependency

go get github.com/henrikrexed/SecurityEventExporter@v0.1.3

Or add directly to your go.mod:

require github.com/henrikrexed/SecurityEventExporter v0.1.3

Using in OCB Manifest

exporters:
  - gomod: github.com/henrikrexed/SecurityEventExporter v0.1.3

Docker Image

docker pull ghcr.io/henrikrexed/securityeventexporter:v0.1.3

📝 Changelog

v0.1.3

• ✅ Removed severity field from JSON payload
• ✅ Removed severity_number field from JSON payload
• ✅ Removed message field (log body) from JSON payload
• ✅ Filtered out source field from default attributes
• ✅ All tests passing
• ✅ Streamlined security event format

---